Exploit for CVE-2026-4020

githubexploit · 2026-06-30

Description

Exploit exists for vulnerability 2026-4020 with no description provided.

Parameterpage · query param

Path/wp-json/gravitysmtp/v1/tests/mock-data

REST API endpoint vulnerable to unauthenticated access leaking ~365 KB JSON with system configuration data when page parameter is supplied.

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

100%confidence this exploit runs

Based on 6 file(s) in the source

41.8%higher than 98.5% of all CVEs

Updated 2026-07-25

Modified:2026-06-30 11:41

Last Seen:2026-06-30 11:55

Reporter:faizdotid

Written in:Go

Last commit:2026-06-30

README2 lines

## https://sploitus.com/exploit?id=5CCC4D1D-CB00-54EE-88B5-E103837659E0
No description provided